New devices must be born open.

Data accessibility becomes a product requirement, like safety. When you specify new building systems, 'where does the data come out?' is a question the manufacturer must already have answered.

Paraphrase. The articles below say it precisely.

When

12 September 2026	Applies to products placed on the market from this date

The law behind it

• Article 3 Obligation to make product data and related service data accessible to the user

Where it lives

Stop 0, Reader, Stop 1, Controller ; alongside the path: Air and climate sensor, Energy meter, Occupancy sensor.

What to ask beside it

Cyber Resilience Act: Is the hardware born secure — and who patches it? In the rulebook

See it in the rulebook · This right in the knowledge base